$ rpki-client -vvvf rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft File: 3UhfmiMRbUEQwHvThx70phTsTSw.mft (raw, json) Hash identifier: Qpq21/XTsxUmNDTdWHVYBYzUM3BZbEx1rEi4bo1W/mw= Subject key identifier: 08:43:AE:35:50:37:5B:F1:A0:49:9B:D5:90:E4:AD:E9:88:8A:EC:D1 Authority key identifier: DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C Certificate issuer: /CN=A91331AA/serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft Manifest number: 9F Signing time: Wed 23 Sep 2026 07:03:56 +0000 Manifest this update: Wed 23 Sep 2026 07:03:55 +0000 Manifest next update: Wed 30 Sep 2026 07:03:55 +0000 Files and hashes: 1: 3UhfmiMRbUEQwHvThx70phTsTSw.crl (hash: 9LmicnKZusjT2udQ9lyAmFsHBmUiBOwudP0Egeczeck=) 2: DAC133B0C8EC11F08ED15548C4F9AE02.roa (hash: Hbt1e1dpkIGnlA91fKm5c8xCNcRrKCzjIZmrOyE5tgg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91331AA, serialNumber=DD485F9A23116D4110C07BD3871EF4A614EC4D2C Validity Not Before: Sep 23 07:03:55 2026 GMT Not After : Sep 30 07:03:55 2026 GMT Subject: CN=6ab379db-663c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d0:e8:84:cc:c0:b9:c6:26:ff:d6:a5:f5:b7: c9:f7:19:9f:3c:cd:db:ac:ed:ea:81:6c:63:03:5b: 71:fa:b3:c6:71:c3:ee:a1:61:ce:10:d7:74:fd:41: 19:a8:f0:60:c4:12:88:76:32:81:e3:a9:7a:f9:01: 6e:26:be:53:79:33:2b:36:ec:8c:36:2e:33:f1:5c: 36:3a:85:fa:af:b2:90:0f:c9:76:76:13:39:38:8b: aa:40:3c:cd:4e:f8:70:e2:89:28:4a:e3:e8:76:3a: 0e:ea:d1:01:ae:35:70:f3:3d:5d:80:ae:c8:a2:27: b6:8b:52:8c:ac:c9:ca:c9:ef:d6:54:48:90:20:b4: c3:8f:a2:1f:97:4a:82:3f:a5:92:ee:80:ef:eb:c3: 02:65:f2:ba:3b:cc:29:fa:77:32:06:41:16:56:a5: f0:0b:fd:30:c5:91:08:4a:57:24:4f:ef:18:ba:2b: c5:8e:72:29:67:c3:81:9b:3a:f7:92:fa:56:80:67: 2b:13:2e:f0:60:be:91:43:65:1f:66:60:ee:38:d1: 18:cd:de:32:36:19:7a:21:f2:98:8b:19:f1:02:33: 72:74:a2:59:57:d1:d9:6b:23:36:ec:32:09:52:95: ce:ff:a8:ab:1a:95:d6:16:89:e8:e7:d7:e3:3a:0a: b2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:43:AE:35:50:37:5B:F1:A0:49:9B:D5:90:E4:AD:E9:88:8A:EC:D1 X509v3 Authority Key Identifier: keyid:DD:48:5F:9A:23:11:6D:41:10:C0:7B:D3:87:1E:F4:A6:14:EC:4D:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3UhfmiMRbUEQwHvThx70phTsTSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91331AA/8AFBDB60C8EB11F086187B80C4F9AE02/3UhfmiMRbUEQwHvThx70phTsTSw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:d3:d1:92:ca:0c:c8:e2:9e:94:e5:3d:07:61:6a:bd:ee:1e: cd:19:06:a7:cb:37:b4:c3:70:18:0f:83:53:27:14:23:2c:f8: fc:77:ba:98:64:39:03:fb:e2:4e:74:ff:27:8e:eb:f1:84:ff: 79:e6:b4:4f:95:ab:28:16:60:e3:27:5a:b7:30:cb:25:14:41: b6:2f:ef:43:e6:d9:dd:fb:ce:a2:86:23:b8:a0:39:d8:ee:e9: 85:c7:66:a8:ae:04:14:d4:1a:30:ce:dd:68:a7:1d:ba:b4:62: e8:3c:6d:36:36:05:51:7f:20:b8:bf:c8:1c:f7:77:1e:86:d3: 2a:28:39:18:52:75:58:6f:1d:fd:ce:89:d1:3e:11:11:52:ff: 4f:8a:2a:b1:64:c8:6b:7a:d0:7d:2f:60:39:ea:a1:2c:6e:f6: 7b:d6:6e:63:33:56:ed:76:fe:5e:0e:c5:7e:b7:e2:41:de:8a: 70:88:5e:d3:ce:0d:a4:53:03:bd:84:84:af:09:9f:6c:a1:70: 55:c8:dd:e7:d0:7a:c7:cb:47:b0:ce:43:68:ed:a9:83:6a:aa: a9:72:fd:56:0e:77:ad:77:b3:99:93:57:c0:61:72:29:3d:be: b2:c5:e8:1b:eb:40:f5:52:cc:18:9b:8f:68:22:a9:ba:b4:88: f2:e5:9d:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMxQUExMTAvBgNVBAUTKERENDg1RjlBMjMxMTZENDExMEMwN0JEMzg3MUVGNEE2 MTRFQzREMkMwHhcNMjYwOTIzMDcwMzU1WhcNMjYwOTMwMDcwMzU1WjAYMRYwFAYD VQQDEw02YWIzNzlkYi02NjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudDohMzAucYm/9al9bfJ9xmfPM3brO3qgWxjA1tx+rPGccPuoWHOENd0/UEZ qPBgxBKIdjKB46l6+QFuJr5TeTMrNuyMNi4z8Vw2OoX6r7KQD8l2dhM5OIuqQDzN Tvhw4okoSuPodjoO6tEBrjVw8z1dgK7Ioie2i1KMrMnKye/WVEiQILTDj6Ifl0qC P6WS7oDv68MCZfK6O8wp+ncyBkEWVqXwC/0wxZEISlckT+8YuivFjnIpZ8OBmzr3 kvpWgGcrEy7wYL6RQ2UfZmDuONEYzd4yNhl6IfKYixnxAjNydKJZV9HZayM27DIJ UpXO/6irGpXWFono59fjOgqyQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhDrjVQ N1vxoEmb1ZDkremIiuzRMB8GA1UdIwQYMBaAFN1IX5ojEW1BEMB704ce9KYU7E0s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzFBQS84QUZCREI2MEM4 RUIxMUYwODYxODdCODBDNEY5QUUwMi8zVWhmbWlNUmJVRVF3SHZUaHg3MHBoVHNU U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNVaGZtaU1SYlVFUXdIdlRoeDcwcGhUc1RTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzFBQS84QUZCREI2MEM4RUIxMUYwODYxODdCODBDNEY5QUUwMi8zVWhmbWlNUmJV RVF3SHZUaHg3MHBoVHNUU3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFNPRksoMyOKelOU9B2Fqve4ezRkGp8s3tMNwGA+DUycUIyz4/He6mGQ5A/vi TnT/J47r8YT/eea0T5WrKBZg4ydatzDLJRRBti/vQ+bZ3fvOooYjuKA52O7phcdm qK4EFNQaMM7daKcdurRi6DxtNjYFUX8guL/IHPd3HobTKig5GFJ1WG8d/c6J0T4R EVL/T4oqsWTIa3rQfS9gOeqhLG72e9ZuYzNW7Xb+Xg7FfrfiQd6KcIhe084NpFMD vYSErwmfbKFwVcjd59B6x8tHsM5DaO2pg2qqqXL9Vg53rXezmZNXwGFyKT2+ssXo G+tA9VLMGJuPaCKpurSI8uWdSg== -----END CERTIFICATE-----Generated at Wed Sep 23 18:56:21 2026 by rpki-client